Baby Blue Ballerzz ("we," "us," or "our") operates the website at babyblueballerzz.org and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, create an account, make purchases, register for programs, or communicate with us.

By using our website, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our services.

Personal Information You Provide

• ● Account registration: Name, email address, phone number, password, communication preferences
• ● Player information: Player name, date of birth, jersey number, position, height, weight, photo, school, medical notes
• ● Orders & payments: Billing/shipping address, payment card details (processed securely by third-party processors — we do not store card numbers)
• ● Tryout registration: Parent/guardian name, contact info, player details, experience level
• ● Camp registration: Participant name, age, emergency contact information
• ● Volunteer sign-ups: Name, contact info, availability
• ● Donations: Name, email, donation amount, payment information
• ● Digital waivers: Signature, date, agreement to terms
• ● Message board posts: Messages and replies you submit
• ● Referral program: Referral codes and referred user information

Information Collected Automatically

• ● Usage data: Pages visited, time spent, referring URLs, browser type, device information
• ● Session data: Shopping cart contents, authentication tokens, CSRF tokens
• ● Analytics: We use Google Analytics (GA4) to understand website usage patterns. This service may collect IP addresses, browser information, and interaction data. See Google's Privacy Policy

Cookies & Session Storage

We use PHP session cookies to maintain your login state, shopping cart, and security tokens. We also use localStorage for theme preferences (dark/light mode). We do not use third-party advertising cookies.

• ● Process and fulfill orders, subscriptions, and membership purchases
• ● Manage player rosters, team assignments, stats, and evaluations
• ● Process tryout, camp, and volunteer registrations
• ● Send order confirmations, shipping updates, and tracking information
• ● Send event reminders, schedule changes, and team announcements
• ● Process subscription billing and send payment receipts
• ● Manage donations and fundraising campaigns
• ● Generate player recruiting profiles (shareable, publicly accessible)
• ● Facilitate the referral program and track referral rewards
• ● Respond to customer support inquiries
• ● Improve our website, products, and services
• ● Comply with legal obligations

Types of Communications

We may contact you through the following channels based on your communication preferences:

• ● Email: Order confirmations, shipping notifications, subscription billing notices, event reminders (with calendar attachments), team announcements, password reset links, account verification, welcome messages, and waiver requests
• ● SMS (Text Messages): Event reminders, schedule changes, urgent team notifications, subscription payment alerts, and order status updates
• ● WhatsApp: Event reminders, schedule changes, urgent team notifications, subscription payment alerts, and order status updates

Transactional Communications

Certain communications are necessary for the services you've requested and cannot be opted out of while using those services. These include:

• ● Order confirmations and receipts
• ● Subscription billing notices and payment failures
• ● Password reset and account verification emails
• ● Shipping and delivery notifications
• ● Digital waiver signature requests

Promotional & Team Communications

With your consent, we send team announcements, event reminders, schedule updates, and program information. These communications are sent based on the preferences you select during registration.

Communication Providers

We use third-party providers to deliver communications. Your contact information is shared with these providers solely for the purpose of message delivery:

• ● Email: Sent via PHP mail or SMTP relay service
• ● SMS: Delivered through providers such as Twilio, Vonage, Plivo, Sinch, Telnyx, Bandwidth, or Flowroute
• ● WhatsApp: Delivered through providers such as Twilio, Sinch, Vonage, Infobip, MessageBird, 360dialog, or Gupshup

All communications are logged for quality assurance and troubleshooting purposes.

Message Frequency & Rates

Message frequency varies based on team activity, events, and your account activity. Standard message and data rates may apply for SMS and WhatsApp messages. We are not responsible for charges from your mobile carrier or internet service provider.

Our program serves youth athletes. Player information (name, date of birth, stats, photos) is collected and managed by parents or guardians through their customer accounts. We do not knowingly collect personal information directly from children under 13.

• ● Parent/guardian accounts manage all player data
• ● Player additions require admin approval before appearing on the roster
• ● Player profile pages are publicly accessible for recruiting purposes — parents should be aware of this when providing player information
• ● Parents may request removal of their child's information at any time by contacting us

If you believe we have collected information from a child under 13 without parental consent, please contact us immediately and we will delete it.

We do not sell, trade, or rent your personal information. We share data only in these circumstances:

• ● Payment processors: Stripe, PayPal, Square, Braintree, Authorize.Net, Adyen, Razorpay, Mollie, Klarna, or Checkout.com — to process payments securely
• ● Shipping carriers: USPS, UPS, FedEx, DHL — to deliver orders and provide tracking
• ● Communication providers: As listed above, for email, SMS, and WhatsApp delivery
• ● Address verification: USPS, SmartyStreets, Lob, Melissa, FedEx, or Google Places — to validate shipping addresses
• ● Analytics: Google Analytics — for website usage analysis
• ● Legal requirements: When required by law, court order, or to protect our rights and safety

We implement reasonable measures to protect your personal information:

• ● Passwords are hashed using bcrypt (never stored in plain text)
• ● All pages served over HTTPS with Cloudflare CDN
• ● CSRF token protection on all form submissions
• ● Prepared SQL statements to prevent injection attacks
• ● HTTP security headers (CSP, X-Frame-Options, X-Content-Type-Options)
• ● Rate limiting on login, registration, and password reset
• ● Session timeouts and secure cookie configuration
• ● Upload directories blocked from executing PHP scripts
• ● Payment card data handled entirely by PCI-compliant third-party processors

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

• ● Account data: Retained while your account is active. You may request deletion at any time
• ● Order records: Retained for accounting and legal compliance purposes
• ● Communication logs: Retained for troubleshooting and quality assurance
• ● Player data: Active player data retained during enrollment; alumni records retained indefinitely for the hall of fame unless removal is requested
• ● Password reset tokens: Expire automatically and are deleted after use
• ● Email verification tokens: Expire after 24 hours

Depending on your jurisdiction, you may have the right to:

• ● Access: Request a copy of the personal data we hold about you
• ● Correction: Update or correct inaccurate information
• ● Deletion: Request deletion of your personal data (subject to legal retention requirements)
• ● Opt-out: Withdraw consent for promotional communications at any time
• ● Data portability: Request your data in a structured, commonly used format

To exercise any of these rights, contact us using the information below.

Under the Florida Digital Bill of Rights (effective July 1, 2024), Florida residents with certain thresholds may have additional data rights including the right to access, correct, delete, and opt out of the sale of personal data and targeted advertising. We do not sell personal data or engage in targeted advertising. To submit a request, contact us at the email below.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the website after changes constitutes acceptance of the revised policy. For material changes, we will make reasonable efforts to notify registered users via email.

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us:

• ● Organization: Baby Blue Ballerzz
• ● Email: info@babyblueballerzz.com
• ● Phone: (754) 714-5222